last executing test programs: 9.144221568s ago: executing program 0 (id=4266): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb30b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00014f0000004f07f9d9855d539b05fbda5947591a22629a3c5679f3d6780f4526c99263e5d04046bd6e2bfec268b2368edc697a47e365f91576f8480045"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.2975296s ago: executing program 0 (id=4291): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x8000, 0x0, 0xffffffff, 0xfffffffd, 0x80081}) 5.099834311s ago: executing program 0 (id=4300): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000440)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb7aef5b1e8986278, 0x39, 0x65, 0x64, 0x64, 0x34, 0x34], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x38, 0x66, 0x35, 0x37], 0x2d, [0x32, 0x31, 0x63], 0x2d, [0x0, 0x66, 0x61, 0x33, 0x63, 0x36, 0x34, 0x30]}}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}, 0x0, 0x48e, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f00000003c0), 0x8, 0x581101) 4.011035297s ago: executing program 0 (id=4301): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b50a0000000000007baaf8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000180100002020752500000000002020207b14f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000007f9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.974965447s ago: executing program 0 (id=4303): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 3.028856363s ago: executing program 1 (id=4311): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000440)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb7aef5b1e8986278, 0x39, 0x65, 0x64, 0x64, 0x34, 0x34], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x38, 0x66, 0x35, 0x37], 0x2d, [0x32, 0x31, 0x63], 0x2d, [0x0, 0x66, 0x61, 0x33, 0x63, 0x36, 0x34, 0x30]}}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}, 0x0, 0x48e, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f00000003c0), 0x8, 0x581101) 1.644498611s ago: executing program 1 (id=4319): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000bffffe2200005"], 0x34}, 0x1, 0x0, 0x0, 0x2002c041}, 0x0) 1.559569722s ago: executing program 1 (id=4323): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000440)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb7aef5b1e8986278, 0x39, 0x65, 0x64, 0x64, 0x34, 0x34], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x38, 0x66, 0x35, 0x37], 0x2d, [0x32, 0x31, 0x63], 0x2d, [0x0, 0x66, 0x61, 0x33, 0x63, 0x36, 0x34, 0x30]}}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}, 0x0, 0x48e, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f00000003c0), 0x8, 0x581101) 1.534705912s ago: executing program 2 (id=4324): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 1.533975242s ago: executing program 3 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) 1.440893772s ago: executing program 0 (id=4327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) getrusage(0x1, &(0x7f00000004c0)) 1.440765722s ago: executing program 2 (id=4328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x400) sync_file_range(r0, 0x4, 0x5, 0x7) 1.440138732s ago: executing program 3 (id=4329): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x800, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000004480)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x8000000000000000}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffe, 0x8001}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x800000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0) connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 800.138576ms ago: executing program 2 (id=4333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000006c0)={0x7f, 0x0, 0xde, 0x492, 0x1}) 616.143097ms ago: executing program 1 (id=4336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x20000058}, 0x0) 600.509617ms ago: executing program 1 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 591.124307ms ago: executing program 2 (id=4339): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 576.276397ms ago: executing program 3 (id=4340): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000240)={[{@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x2d, 0x35a, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 554.718507ms ago: executing program 1 (id=4341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0xb, {0xb, 0x30, "33282eb1923444513f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 510.091908ms ago: executing program 3 (id=4343): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x3}}, 0x10) 509.848027ms ago: executing program 2 (id=4344): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x5, 0x401, 0xed, {0x0, 0xea60}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "d54e1b60da706da1"}}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 509.260278ms ago: executing program 4 (id=4345): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 494.919768ms ago: executing program 3 (id=4346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 489.005237ms ago: executing program 2 (id=4347): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000440)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb7aef5b1e8986278, 0x39, 0x65, 0x64, 0x64, 0x34, 0x34], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x38, 0x66, 0x35, 0x37], 0x2d, [0x32, 0x31, 0x63], 0x2d, [0x0, 0x66, 0x61, 0x33, 0x63, 0x36, 0x34, 0x30]}}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}, 0x0, 0x48e, &(0x7f0000001500)="$eJzs3MtrXNUfAPDvnSR9t8mvv1ptbTVaxeIjadKqXbhQUXChIOiiLmOS1tppI00EW4JGkbqUgntxKfgXuHMj6kIEtwoupVA0CE1dRe4rmUwmad6TZj4fmMw5c8+dc7733jNz7j25E0DL6k7/JBF7IuK3iOjMs3MLdOdPU5Pjg7cnxweTmJ5+468kK3drcnywLFqut7vIHK9EVD5N4vlkfr2jV65eGKhWhy8X+d6xi+/1jl65+tT5iwPnhs8NX+o/ffrUyb5nn+l/ek3iTOO6dfjDkSOHXnnr+muDZ66//eM3abMOHs2X18bRQGVO7naDgBroTrfa39OZ+mWPLrP9m93emnTS3sSGsCxtEZHuro6s/3dGW8zuvM54+ZOmNg5YV+l30/aFF09MA1tYEs1uAdAc5Rd9ev5bPjZo6LEp3HwhYluRnpocH5yaib995qS/Yx3r746IMxP/fpk+4s7XIQAAVi0b2zzZaPxXiYPZcz7Xsa+YQ+mKiP9FxP6I+H9EHIiIeyKysvdGxH35ytOdS6y/uy4/f/xTudGwzWskHf89VzP2m6qJv3jqaitye7P4O5Kz56vDJ4ptcjw6tqf5vkXq+O6lXz9faFnt+C99pPWXY8GiATfa6y7QDQ2MDazVRrj5ccTh9kbxJzMzAekRcCgiDi/vrfeVifOPf31koUJ3jn8RazDPNP1VxGP5/p+IuvhLyeLzk707ojp8orc8Kub76Zdrry9U/6riXwPp/t819/ivK9H5T5LP13ZEtTp8eXT5dVz7/bMFz2lWevxvS97M5qx/fid/7YOBsbHLfRHbklezfHlOl73eP7tumS/Lp/EfP9a4/+8v1knjvz8i0oP4aEQ8EBEPFm1/KCIejohji8T/w4uPvLtI/Ekk0dT9P9Tw82/m+O9KaufrV5Bou/D9twvNmC9t/5+KieyzNpd9/t3BUhu4ys0HAAAAd4VKROyJpNKTp7v3RKXS05P/D/+B2FWpjoyOPXF25P1LQ/k9Al3RUSmvdHXWXA/tSyaKd8zz/cW14nL5yeK68RdtO7N8z+BIdajJsUOr2z23/0fZ/1N/tjW7dcC6c78WtK76/l9pUjuAjbeU73/nArA1Nej/O5vRDmDjOf+H1tWo/39Ulzf+h61pfv//o8FP1gFbkfE/tC79H1qX/g8taTX39a88Ud4ssPL32bHkO/xbJVH+4sV61rUzZl+JStNDXrfEjs3RjJpE2mM2ttLZ31ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4m/0XAAD//1DC5oA=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f00000003c0), 0x8, 0x581101) 462.880158ms ago: executing program 4 (id=4348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) utime(&(0x7f0000000080)='./file0\x00', 0x0) 442.669598ms ago: executing program 4 (id=4349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x401, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) 425.223048ms ago: executing program 3 (id=4350): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x800, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000004480)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x8000000000000000}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffe, 0x8001}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x800000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0) connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 320.242999ms ago: executing program 4 (id=4351): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x6, 0x3ff, 0xc, 0x1, 0x2, 0x1ff, 0xb, 0x7b]) 42.92357ms ago: executing program 4 (id=4352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=4353): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x3a, 0xfff, 0x3}, 0x1c) kernel console output (not intermixed with test programs): to_hsr entered promiscuous mode [ 874.971113][ T1091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.994952][ T1091] usb 5-1: config 0 descriptor?? [ 875.921149][ T1091] usb 5-1: can't set config #0, error -71 [ 875.961827][ T1091] usb 5-1: USB disconnect, device number 12 [ 876.358640][ T8898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 881.949530][ T8964] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 882.803291][ T8983] overlayfs: failed to resolve './file1': -2 [ 885.091418][ T8998] loop0: detected capacity change from 0 to 512 [ 885.145950][ T8998] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 886.027426][ T9008] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 887.013548][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 887.013567][ T30] audit: type=1400 audit(1733162195.110:3400): avc: denied { create } for pid=9003 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 887.047852][ T9002] netlink: 'syz.4.1947': attribute type 3 has an invalid length. [ 889.465978][ T9031] overlayfs: unrecognized mount option "uuid=null" or missing value [ 889.504900][ T1239] Bluetooth: hci0: command 0x1003 tx timeout [ 889.511060][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 889.794622][ T9043] loop0: detected capacity change from 0 to 128 [ 891.914034][ T694] Bluetooth: hci0: command 0x1001 tx timeout [ 891.919914][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 893.923320][ T30] audit: type=1326 audit(1733162203.000:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.3.1965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x0 [ 893.971328][ T1239] Bluetooth: hci0: command 0x1009 tx timeout [ 893.990730][ T9082] loop0: detected capacity change from 0 to 512 [ 894.083413][ T9082] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 895.076659][ T9099] loop0: detected capacity change from 0 to 512 [ 895.131807][ T9099] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 896.740161][ T624] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 899.536855][ T1239] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 899.997823][ T624] usb 4-1: device not accepting address 7, error -71 [ 900.028457][ T9140] loop0: detected capacity change from 0 to 512 [ 900.916404][ T9140] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 903.331779][ T9153] sch_fq: defrate 0 ignored. [ 903.928943][ T9181] usb usb7: usbfs: process 9181 (syz.2.1995) did not claim interface 0 before use [ 903.938926][ T9181] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 907.422554][ T9219] loop0: detected capacity change from 0 to 512 [ 907.491783][ T9219] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 907.539589][ T9223] usb usb7: usbfs: process 9223 (syz.1.2006) did not claim interface 0 before use [ 907.686165][ T30] audit: type=1400 audit(1733162216.760:3402): avc: denied { append } for pid=9230 comm="syz.1.2009" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 907.869142][ T9232] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2008'. [ 908.937143][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 909.070384][ T9259] netlink: 'syz.3.2019': attribute type 3 has an invalid length. [ 911.458664][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 911.475332][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 911.491479][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 912.315697][ T30] audit: type=1326 audit(1733162221.390:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.2026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d2558af19 code=0x0 [ 912.437184][ T9300] overlayfs: unrecognized mount option "uuid=null" or missing value [ 912.492670][ T9302] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 912.636445][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2028'. [ 913.972951][ T9333] device veth0_to_hsr entered promiscuous mode [ 914.708561][ T9345] loop0: detected capacity change from 0 to 256 [ 914.761394][ T9345] exfat: Deprecated parameter 'utf8' [ 914.766604][ T9345] exfat: Deprecated parameter 'utf8' [ 914.785856][ T9352] tmpfs: Bad value for 'size' [ 914.805150][ T9345] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 915.773483][ T9356] overlayfs: unrecognized mount option "uuid=null" or missing value [ 916.209097][ T9370] loop0: detected capacity change from 0 to 512 [ 916.285952][ T9370] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 917.122048][ T9391] loop0: detected capacity change from 0 to 256 [ 917.611759][ T9416] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.2066'. [ 917.683979][ T9420] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2069'. [ 917.981806][ T9424] loop0: detected capacity change from 0 to 512 [ 918.093261][ T9427] IPv6: NLM_F_CREATE should be specified when creating new route [ 918.101247][ T9427] IPv6: Can't replace route, no match found [ 918.122508][ T9424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 918.155986][ T9424] EXT4-fs (loop0): 1 truncate cleaned up [ 918.162372][ T9424] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 918.190795][ T9424] netlink: 'syz.0.2070': attribute type 3 has an invalid length. [ 918.237624][ T30] audit: type=1400 audit(1733162227.310:3404): avc: denied { getopt } for pid=9437 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 918.320321][ T30] audit: type=1400 audit(1733162227.390:3405): avc: denied { read } for pid=9443 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 920.258929][ T9469] loop0: detected capacity change from 0 to 16 [ 920.282216][ T9469] erofs: Unknown parameter 'ÿÿÿÿ' [ 920.299239][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 920.435532][ T9487] loop0: detected capacity change from 0 to 512 [ 920.477944][ T9487] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 921.410205][ T9497] sch_fq: defrate 0 ignored. [ 921.495999][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 921.523631][ T9513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2103'. [ 921.554665][ T9516] overlayfs: failed to resolve './file1': -2 [ 921.576005][ T9513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2103'. [ 922.710133][ T9545] loop0: detected capacity change from 0 to 16 [ 922.771432][ T9545] erofs: Unknown parameter 'ÿÿÿÿ' [ 922.778805][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2121'. [ 923.231365][ T1239] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 923.375749][ T9563] loop0: detected capacity change from 0 to 512 [ 923.470509][ T9563] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 923.578761][ T1239] usb 2-1: Using ep0 maxpacket: 32 [ 924.357858][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2125'. [ 924.373982][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 925.010002][ T1239] usb 2-1: New USB device found, idVendor=0955, idProduct=09ff, bcdDevice=41.9e [ 925.023268][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.099967][ T1239] usb 2-1: Product: syz [ 925.151613][ T1239] usb 2-1: Manufacturer: syz [ 925.190684][ T1239] usb 2-1: SerialNumber: syz [ 925.222876][ T1239] r8152-cfgselector 2-1: config 0 descriptor?? [ 925.571192][ T1239] r8152-cfgselector 2-1: Unknown version 0x0000 [ 925.577519][ T1239] usb-storage 2-1:0.0: USB Mass Storage device detected [ 925.711172][ T1239] r8152-cfgselector 2-1: Unknown version 0x0000 [ 925.721345][ T1239] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 926.109011][ T9606] sch_fq: defrate 0 ignored. [ 927.635059][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 927.667812][ T9628] loop0: detected capacity change from 0 to 512 [ 927.690550][ T9628] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 927.717484][ T9627] netlink: 'syz.2.2135': attribute type 3 has an invalid length. [ 927.753256][ T30] audit: type=1400 audit(1733162236.830:3406): avc: denied { write } for pid=9631 comm="syz.1.2140" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 927.806136][ T30] audit: type=1400 audit(1733162236.830:3407): avc: denied { open } for pid=9631 comm="syz.1.2140" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 927.974609][ T9642] tmpfs: Unknown parameter 'permit_directio' [ 929.051178][ T30] audit: type=1326 audit(1733162237.280:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.202452][ T30] audit: type=1326 audit(1733162237.280:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.255979][ T30] audit: type=1326 audit(1733162237.310:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41cf51e880 code=0x7ffc0000 [ 929.593506][ T30] audit: type=1326 audit(1733162237.320:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.620692][ T30] audit: type=1326 audit(1733162237.320:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.654417][ T30] audit: type=1326 audit(1733162237.350:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.679299][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 929.695093][ T30] audit: type=1326 audit(1733162237.350:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.720373][ T30] audit: type=1326 audit(1733162237.360:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41cf51ff19 code=0x7ffc0000 [ 929.797526][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'. [ 929.806729][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'. [ 929.839917][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2155'. [ 930.005976][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2161'. [ 930.014993][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2161'. [ 931.774121][ T9704] IPv6: sit4: Disabled Multicast RS [ 932.815491][ T9723] loop0: detected capacity change from 0 to 512 [ 932.861790][ T9723] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 933.938206][ T9741] loop0: detected capacity change from 0 to 512 [ 936.428278][ T9741] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 936.531093][ T1091] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 938.377481][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 938.377497][ T30] audit: type=1400 audit(1733162247.450:3420): avc: denied { connect } for pid=9793 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 938.486103][ T9805] netlink: 'syz.4.2202': attribute type 4 has an invalid length. [ 938.494939][ T9805] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2202'. [ 938.526712][ T9809] usb usb7: usbfs: process 9809 (syz.4.2205) did not claim interface 7 before use [ 940.228912][ T9835] loop0: detected capacity change from 0 to 512 [ 940.279778][ T9845] netlink: 'syz.4.2217': attribute type 3 has an invalid length. [ 940.306927][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 940.312902][ T9835] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 940.324667][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 940.334531][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 940.977443][ T9859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 940.986403][ T9859] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 940.995041][ T9859] overlayfs: missing 'lowerdir' [ 942.578158][ T9881] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 943.316382][ T9933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2251'. [ 943.964015][ T30] audit: type=1400 audit(1733162253.040:3421): avc: denied { ioctl } for pid=9944 comm="syz.2.2254" path="socket:[45597]" dev="sockfs" ino=45597 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 946.061803][ T9961] tipc: Can't bind to reserved service type 0 [ 946.114190][ T9971] loop0: detected capacity change from 0 to 512 [ 946.161203][ T9971] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 947.167069][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2271'. [ 947.187994][ T9989] loop0: detected capacity change from 0 to 512 [ 947.282223][ T9989] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 947.417062][T10017] usb usb7: usbfs: process 10017 (syz.3.2284) did not claim interface 0 before use [ 948.490095][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2289'. [ 948.527280][ T30] audit: type=1400 audit(1733162257.600:3422): avc: denied { append } for pid=10040 comm="syz.2.2294" name="event2" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 948.551880][T10043] binder: 10042:10043 ioctl c0046209 0 returned -22 [ 948.599518][T10057] loop0: detected capacity change from 0 to 512 [ 948.637789][T10057] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 950.234048][ T30] audit: type=1400 audit(1733162259.310:3423): avc: denied { bind } for pid=10076 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 950.273479][ T30] audit: type=1400 audit(1733162259.330:3424): avc: denied { name_bind } for pid=10076 comm="syz.4.2306" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 950.308600][T10085] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 950.317633][ T30] audit: type=1400 audit(1733162259.330:3425): avc: denied { node_bind } for pid=10076 comm="syz.4.2306" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 950.404857][T10094] loop0: detected capacity change from 0 to 512 [ 950.416392][ T30] audit: type=1400 audit(1733162259.490:3426): avc: denied { nlmsg_write } for pid=10096 comm="syz.4.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 950.464147][T10094] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 950.470761][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 950.521133][ T694] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 950.844508][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 950.923990][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 950.942895][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 950.957786][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 951.055749][ T694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 951.081917][T10128] netlink: 'syz.2.2329': attribute type 3 has an invalid length. [ 951.119299][T10138] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 951.141106][ T694] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 951.152019][ T694] usb 2-1: too many endpoints for config 1 interface 0 altsetting 245: 148, using maximum allowed: 30 [ 951.165272][ T694] usb 2-1: config 1 interface 0 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 951.179413][ T694] usb 2-1: config 1 interface 0 has no altsetting 0 [ 951.736383][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 951.772951][T10170] loop0: detected capacity change from 0 to 128 [ 951.811301][ T694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.820611][ T694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.828618][ T694] usb 2-1: Product: syz [ 951.832741][ T694] usb 2-1: Manufacturer: syz [ 951.837162][ T694] usb 2-1: SerialNumber: syz [ 951.861903][T10170] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 951.885525][T10170] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 951.894170][T10170] FAT-fs (loop0): Filesystem has been set read-only [ 952.005894][T10183] loop0: detected capacity change from 0 to 2048 [ 952.109459][T10183] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,nolazytime,stripe=0x0000000000000060,. Quota mode: none. [ 952.124404][T10183] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.143237][T10183] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2354: bg 0: block 345: padding at end of block bitmap is not set [ 952.157775][T10183] EXT4-fs (loop0): Remounting filesystem read-only [ 952.165258][ T30] audit: type=1400 audit(1733162261.220:3427): avc: denied { setattr } for pid=10182 comm="syz.0.2354" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 952.165408][T10183] EXT4-fs error (device loop0): ext4_xattr_block_set:2197: inode #15: comm syz.0.2354: bad block 128 [ 952.207136][T10183] EXT4-fs (loop0): Remounting filesystem read-only [ 952.551605][ T694] cdc_ether 2-1:1.0: skipping garbage [ 952.556969][ T694] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 952.664052][ T694] usb 2-1: USB disconnect, device number 8 [ 952.678350][T10201] netlink: 'syz.0.2358': attribute type 46 has an invalid length. [ 952.697639][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 952.744665][T10204] loop0: detected capacity change from 0 to 16 [ 952.781346][T10204] erofs: Unknown parameter 'ÿÿÿÿ' [ 952.900096][T10221] loop0: detected capacity change from 0 to 512 [ 952.918248][T10221] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 952.939566][ T30] audit: type=1400 audit(1733162262.010:3428): avc: denied { mount } for pid=10220 comm="syz.3.2369" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 952.992429][ T30] audit: type=1400 audit(1733162262.020:3429): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 953.397535][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 953.635473][ T30] audit: type=1400 audit(1733162262.710:3430): avc: denied { ioctl } for pid=10285 comm="syz.4.2400" path="socket:[47254]" dev="sockfs" ino=47254 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 953.715856][T10297] overlayfs: missing 'lowerdir' [ 953.716350][T10298] incfs: Options parsing error. -22 [ 953.726779][T10300] netlink: 'syz.4.2406': attribute type 10 has an invalid length. [ 953.726782][T10298] incfs: mount failed -22 [ 953.741404][T10300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.819529][T10311] IPv6: NLM_F_CREATE should be specified when creating new route [ 953.833431][T10311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 953.840515][T10311] IPv6: NLM_F_CREATE should be set when creating new route [ 953.847654][T10311] IPv6: NLM_F_CREATE should be set when creating new route [ 954.019244][ T30] audit: type=1326 audit(1733162263.090:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0e0d4f19 code=0x7ffc0000 [ 954.092802][ T30] audit: type=1326 audit(1733162263.120:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz.4.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0e0d4f19 code=0x7ffc0000 [ 954.439725][T10332] xt_TCPMSS: Only works on TCP SYN packets [ 954.940304][T10368] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 955.682891][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 955.757078][T10396] IPv6: sit3: Disabled Multicast RS [ 955.774969][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2449'. [ 955.982919][T10414] device gretap0 left promiscuous mode [ 955.988586][T10414] gretap0: refused to change device tx_queue_len [ 955.995410][T10414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 956.032515][T10422] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2459'. [ 956.110691][T10428] loop0: detected capacity change from 0 to 512 [ 956.183497][T10428] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 957.263541][T10447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.536153][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2481'. [ 958.553012][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 958.553028][ T30] audit: type=1400 audit(1733162267.630:3436): avc: denied { accept } for pid=10483 comm="syz.0.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 958.773673][T10498] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2488'. [ 958.904256][T10508] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2492'. [ 959.190877][T10543] loop0: detected capacity change from 0 to 512 [ 959.203456][T10543] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 959.239531][ T30] audit: type=1400 audit(1733162268.310:3437): avc: denied { connect } for pid=10549 comm="syz.3.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 960.343335][T10577] Restarting kernel threads ... done. [ 960.442780][T10583] xt_socket: unknown flags 0x50 [ 960.496887][T10586] loop0: detected capacity change from 0 to 512 [ 960.579382][T10590] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 960.765263][T10586] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 961.080876][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 961.414747][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 961.480232][T10624] netlink: 'syz.3.2545': attribute type 32 has an invalid length. [ 961.496400][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 961.732139][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2553'. [ 961.741236][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2553'. [ 961.764421][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 961.773196][T10644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2554'. [ 961.836346][ T30] audit: type=1400 audit(1733162270.910:3438): avc: denied { accept } for pid=10651 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 961.990796][T10678] loop0: detected capacity change from 0 to 256 [ 962.068702][T10697] x_tables: unsorted entry at hook 1 [ 962.691182][ T694] Bluetooth: hci0: command 0x1003 tx timeout [ 962.697128][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 962.891044][ T58] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 963.075878][T10733] loop0: detected capacity change from 0 to 512 [ 963.104332][ T30] audit: type=1400 audit(1733162272.180:3439): avc: denied { setopt } for pid=10738 comm="syz.4.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 963.127894][T10733] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 963.150915][ T30] audit: type=1400 audit(1733162272.220:3440): avc: denied { setopt } for pid=10742 comm="syz.4.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 963.171195][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 963.308788][ T58] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 963.325210][ T58] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 963.335728][ T58] usb 2-1: config 135 has no interface number 0 [ 963.343068][ T58] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 963.354497][ T58] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 963.368331][ T58] usb 2-1: config 135 interface 230 has no altsetting 0 [ 963.521923][T10762] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936 [ 963.641161][ T58] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 963.650149][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.658358][ T58] usb 2-1: Product: syz [ 963.662962][ T58] usb 2-1: Manufacturer: syz [ 963.667386][ T58] usb 2-1: SerialNumber: syz [ 963.931324][ T58] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 963.937646][ T58] usb 2-1: No valid video chain found. [ 964.134534][ T58] usb 2-1: USB disconnect, device number 9 [ 964.570515][T10786] loop0: detected capacity change from 0 to 131072 [ 964.717877][T10786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 964.747250][ T30] audit: type=1400 audit(1733162273.800:3441): avc: denied { getopt } for pid=10820 comm="syz.4.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 964.771200][ T694] Bluetooth: hci0: command 0x1001 tx timeout [ 964.777060][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 964.789606][T10786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 964.866213][T10827] tmpfs: Unknown parameter 'permit_directio' [ 964.919431][ T30] audit: type=1326 audit(1733162273.970:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 964.960941][ T30] audit: type=1326 audit(1733162273.970:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 964.967824][T10829] __nla_validate_parse: 1 callbacks suppressed [ 964.967843][T10829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2632'. [ 965.004816][T10829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2632'. [ 965.015814][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 965.026346][ T30] audit: type=1326 audit(1733162273.970:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046cbcf880 code=0x7ffc0000 [ 965.082274][ T30] audit: type=1326 audit(1733162273.980:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.109929][ T30] audit: type=1326 audit(1733162273.980:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.133643][ T30] audit: type=1326 audit(1733162273.980:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.157202][ T30] audit: type=1326 audit(1733162273.980:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.180647][ T30] audit: type=1326 audit(1733162273.980:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.205856][ T30] audit: type=1326 audit(1733162273.990:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046cbd0f19 code=0x7ffc0000 [ 965.569407][T10865] loop0: detected capacity change from 0 to 512 [ 965.638321][T10865] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 965.652307][T10865] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 965.660861][T10865] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 965.669207][T10865] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 965.678137][T10865] EXT4-fs (loop0): 1 truncate cleaned up [ 965.684000][T10865] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 965.777296][T10865] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 966.085461][T10872] loop0: detected capacity change from 0 to 512 [ 966.182198][T10872] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 966.854993][ T694] Bluetooth: hci0: command 0x1009 tx timeout [ 967.574427][T10888] loop0: detected capacity change from 0 to 512 [ 967.686858][T10899] x_tables: unsorted underflow at hook 3 [ 967.699790][T10888] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 967.733303][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2663'. [ 967.824517][T10918] device gre1 entered promiscuous mode [ 968.823011][T10960] cgroup: Invalid name [ 968.982547][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 970.093869][T10997] loop0: detected capacity change from 0 to 512 [ 970.211154][T10997] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 970.236482][T11007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2705'. [ 970.268440][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 971.110374][T11031] loop0: detected capacity change from 0 to 512 [ 971.160775][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2715'. [ 971.210358][T11031] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 971.252692][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 971.334704][T11042] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2718'. [ 973.399147][T11078] loop0: detected capacity change from 0 to 512 [ 973.507511][T11078] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 974.192081][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 974.231410][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 974.247037][T11104] loop0: detected capacity change from 0 to 256 [ 974.351723][T11104] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 974.422671][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 974.422688][ T30] audit: type=1400 audit(1733162283.500:3455): avc: denied { create } for pid=11114 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 974.677953][ T30] audit: type=1400 audit(1733162283.500:3456): avc: denied { write } for pid=11114 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 976.025597][T11124] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2750'. [ 976.185768][ T30] audit: type=1400 audit(1733162285.260:3457): avc: denied { read } for pid=11141 comm="syz.0.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 978.809482][T11169] netlink: 'syz.0.2769': attribute type 11 has an invalid length. [ 978.817241][T11169] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2769'. [ 978.891068][ T30] audit: type=1400 audit(1733162287.960:3458): avc: denied { write } for pid=11175 comm="syz.3.2770" path="socket:[49866]" dev="sockfs" ino=49866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 978.938042][T11182] loop0: detected capacity change from 0 to 512 [ 978.964803][T11182] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 979.049592][ T30] audit: type=1400 audit(1733162288.120:3459): avc: denied { read } for pid=11194 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 979.256150][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2783'. [ 979.311880][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 981.391495][T11244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2796'. [ 981.441304][ T694] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 981.479595][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2801'. [ 981.501301][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2801'. [ 981.589261][T11264] loop0: detected capacity change from 0 to 512 [ 981.661824][T11264] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 981.662806][T11265] overlayfs: failed to resolve './file1': -2 [ 981.691019][ T694] usb 4-1: Using ep0 maxpacket: 32 [ 981.851216][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.867495][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.878094][ T694] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 981.922483][ T694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.005125][ T694] usb 4-1: config 0 descriptor?? [ 982.041676][ T694] hub 4-1:0.0: USB hub found [ 982.261396][ T694] hub 4-1:0.0: 1 port detected [ 982.481235][ T694] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 982.487418][ T694] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 982.611112][ T694] usbhid 4-1:0.0: can't add hid device: -71 [ 982.616973][ T694] usbhid: probe of 4-1:0.0 failed with error -71 [ 982.697764][ T694] usb 4-1: USB disconnect, device number 9 [ 982.981766][ T30] audit: type=1400 audit(1733162292.060:3460): avc: denied { read } for pid=11327 comm="syz.4.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 983.061119][T11340] netlink: 'syz.0.2838': attribute type 6 has an invalid length. [ 983.071066][T11340] IPv6: NLM_F_CREATE should be specified when creating new route [ 983.105140][T11345] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 983.181363][T11348] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 983.260877][T11348] overlayfs: missing 'lowerdir' [ 983.508774][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2847'. [ 983.531085][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'. [ 983.601265][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'. [ 983.773428][T11371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2852'. [ 984.106654][T11388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2861'. [ 984.121486][T11392] incfs: Options parsing error. -22 [ 984.131548][T11388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2861'. [ 984.135490][T11392] incfs: mount failed -22 [ 984.165997][T11399] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2865'. [ 984.235273][T11409] syz.2.2870[11409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.235408][T11409] syz.2.2870[11409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.251201][ T30] audit: type=1400 audit(1733162293.300:3461): avc: denied { getopt } for pid=11406 comm="syz.1.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 984.324080][T11416] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 984.338859][T11418] loop0: detected capacity change from 0 to 512 [ 984.408107][T11418] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 984.484997][T11448] SELinux: policydb string does not match my string SE Linux [ 984.492454][T11448] SELinux: failed to load policy [ 985.132727][T11467] netlink: 'syz.4.2895': attribute type 32 has an invalid length. [ 987.681066][ T694] Bluetooth: hci0: command 0x1003 tx timeout [ 987.879459][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 989.235394][T11519] loop0: detected capacity change from 0 to 512 [ 989.401885][T11519] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 989.771069][ T694] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 989.891033][ T3492] Bluetooth: hci0: command 0x1001 tx timeout [ 989.896962][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 990.021116][ T694] usb 3-1: Using ep0 maxpacket: 16 [ 990.161091][ T694] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 990.189912][ T694] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 990.227002][ T694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.237089][T11549] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2922'. [ 990.461358][ T694] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 990.470275][ T694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.490435][ T694] usb 3-1: Product: syz [ 990.511021][ T694] usb 3-1: Manufacturer: syz [ 990.515446][ T694] usb 3-1: SerialNumber: syz [ 990.641862][T11569] loop0: detected capacity change from 0 to 256 [ 990.710651][T11569] FAT-fs (loop0): Directory bread(block 64) failed [ 990.717235][T11569] FAT-fs (loop0): Directory bread(block 65) failed [ 990.723810][T11569] FAT-fs (loop0): Directory bread(block 66) failed [ 990.730204][T11569] FAT-fs (loop0): Directory bread(block 67) failed [ 990.736783][T11569] FAT-fs (loop0): Directory bread(block 68) failed [ 990.751104][T11569] FAT-fs (loop0): Directory bread(block 69) failed [ 990.757490][T11569] FAT-fs (loop0): Directory bread(block 70) failed [ 990.785158][T11569] FAT-fs (loop0): Directory bread(block 71) failed [ 990.801199][T11569] FAT-fs (loop0): Directory bread(block 72) failed [ 990.811066][T11569] FAT-fs (loop0): Directory bread(block 73) failed [ 990.972323][T11588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.021709][T11593] 9pnet: Could not find request transport: f [ 991.027831][T11593] cgroup: Unexpected value for 'cpuset_v2_mode' [ 991.041162][ T694] usb 3-1: 0:2 : does not exist [ 991.054407][ T694] usb 3-1: USB disconnect, device number 14 [ 991.971018][ T694] Bluetooth: hci0: command 0x1009 tx timeout [ 992.433208][T11638] usb usb7: usbfs: process 11638 (syz.3.2961) did not claim interface 0 before use [ 992.445784][T11638] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 992.707423][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2969'. [ 992.955137][T11689] loop0: detected capacity change from 0 to 512 [ 993.031943][T11689] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 993.231197][ T58] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 993.335698][T11702] overlayfs: failed to resolve './file1': -2 [ 993.671109][ T58] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 993.679045][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.689307][ T58] usb 4-1: config 0 has no interface number 0 [ 993.861125][ T58] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 993.872792][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.880659][ T58] usb 4-1: Product: syz [ 993.884966][ T58] usb 4-1: Manufacturer: syz [ 993.889385][ T58] usb 4-1: SerialNumber: syz [ 993.895886][ T58] usb 4-1: config 0 descriptor?? [ 993.992036][T11740] loop0: detected capacity change from 0 to 16 [ 994.002219][T11740] erofs: Unknown parameter 'ÿÿÿÿ' [ 994.201164][ T58] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 994.208543][ T58] usb 4-1: No valid video chain found. [ 994.402564][ T58] usb 4-1: USB disconnect, device number 10 [ 995.631089][ T694] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 995.701035][ T3492] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 995.871083][ T694] usb 3-1: Using ep0 maxpacket: 16 [ 995.951295][ T3492] usb 4-1: Using ep0 maxpacket: 8 [ 995.976917][T11787] loop0: detected capacity change from 0 to 512 [ 995.991251][ T694] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 996.009442][ T694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.023565][ T694] usb 3-1: config 0 has no interface number 0 [ 996.046966][T11787] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 996.081153][ T3492] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 996.095479][ T3492] usb 4-1: config 0 has no interface number 0 [ 996.111161][ T3492] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.139356][ T3492] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.204578][ T3492] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 996.251115][ T694] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 996.266575][ T3492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.277680][ T694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.297049][ T3492] usb 4-1: config 0 descriptor?? [ 996.304055][ T694] usb 3-1: Product: syz [ 996.313215][ T694] usb 3-1: Manufacturer: syz [ 996.321798][ T694] usb 3-1: SerialNumber: syz [ 996.336304][ T694] usb 3-1: config 0 descriptor?? [ 996.383369][ T694] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 996.389619][ T694] usb 3-1: No valid video chain found. [ 996.584068][ T694] usb 3-1: USB disconnect, device number 15 [ 996.744684][ T30] audit: type=1400 audit(1733162305.820:3462): avc: denied { search } for pid=11813 comm="syz.1.3036" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 996.789041][ T30] audit: type=1400 audit(1733162305.820:3463): avc: denied { remount } for pid=11813 comm="syz.1.3036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 996.963863][T11840] loop0: detected capacity change from 0 to 512 [ 997.032948][ T58] usb 4-1: USB disconnect, device number 11 [ 997.096631][T11840] EXT4-fs (loop0): Ignoring removed orlov option [ 997.122039][T11840] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 997.150903][T11840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 997.179060][T11840] EXT4-fs (loop0): 1 orphan inode deleted [ 997.184829][T11840] EXT4-fs (loop0): 1 truncate cleaned up [ 997.190589][T11840] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 997.232360][ T30] audit: type=1400 audit(1733162306.310:3464): avc: denied { unlink } for pid=11839 comm="syz.0.3049" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 997.232381][T11840] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.3049: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 997.283234][T11860] overlayfs: failed to resolve './file1': -2 [ 997.289281][T11840] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1796: Corrupt filesystem [ 997.681201][ T30] audit: type=1400 audit(1733162306.680:3465): avc: denied { read } for pid=11871 comm="syz.0.3061" name="file0" dev="tmpfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 997.711233][ T30] audit: type=1400 audit(1733162306.680:3466): avc: denied { open } for pid=11871 comm="syz.0.3061" path="/588/file0" dev="tmpfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 997.734844][ T30] audit: type=1400 audit(1733162306.690:3467): avc: denied { ioctl } for pid=11871 comm="syz.0.3061" path="/588/file0" dev="tmpfs" ino=3335 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 997.962237][T11891] loop0: detected capacity change from 0 to 1024 [ 998.021940][T11891] EXT4-fs (loop0): Ignoring removed nobh option [ 998.030789][T11891] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.3069: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 998.049907][T11891] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.3069: couldn't read orphan inode 11 (err -117) [ 998.068882][T11891] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 998.096817][T11891] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3069: Invalid block bitmap block 0 in block_group 0 [ 998.110693][T11891] Quota error (device loop0): write_blk: dquota write failed [ 998.118363][T11891] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 998.130254][T11891] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.3069: Failed to acquire dquot type 0 [ 998.200072][ T2229] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:9: Invalid inode table block 8589934593 in block_group 0 [ 998.763973][T11924] loop0: detected capacity change from 0 to 256 [ 998.846220][T11924] FAT-fs (loop0): Directory bread(block 64) failed [ 998.858924][T11924] FAT-fs (loop0): Directory bread(block 65) failed [ 998.870094][T11924] FAT-fs (loop0): Directory bread(block 66) failed [ 998.880952][T11924] FAT-fs (loop0): Directory bread(block 67) failed [ 998.892855][T11924] FAT-fs (loop0): Directory bread(block 68) failed [ 998.903411][T11924] FAT-fs (loop0): Directory bread(block 69) failed [ 998.913973][T11924] FAT-fs (loop0): Directory bread(block 70) failed [ 998.924502][T11924] FAT-fs (loop0): Directory bread(block 71) failed [ 998.934009][T11924] FAT-fs (loop0): Directory bread(block 72) failed [ 998.944534][T11924] FAT-fs (loop0): Directory bread(block 73) failed [ 999.050900][T11927] loop0: detected capacity change from 0 to 512 [ 999.161837][T11927] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 999.788840][ T58] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 999.798760][T11937] overlayfs: failed to resolve './file1': -2 [ 999.934223][T11942] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3086'. [ 999.943336][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1000.107492][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 1000.461086][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.479613][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.496449][ T58] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1000.521648][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.561530][ T58] usb 2-1: config 0 descriptor?? [ 1001.455092][T11972] netlink: 'syz.0.3095': attribute type 2 has an invalid length. [ 1002.238413][ T58] wacom 0003:056A:0027.0005: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1002.247424][T11985] 8021q: VLANs not supported on lo [ 1002.248624][ T58] wacom 0003:056A:0027.0005: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 1002.279685][ T58] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0005/input/input21 [ 1002.295616][ T58] usb 2-1: USB disconnect, device number 10 [ 1002.412692][T11993] loop0: detected capacity change from 0 to 128 [ 1003.250870][T12022] loop0: detected capacity change from 0 to 128 [ 1003.366012][T12022] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,sysvgroups,acl,,errors=continue. Quota mode: none. [ 1003.381420][T12022] ext4 filesystem being mounted at /609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.428307][T12022] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3115: No space for directory leaf checksum. Please run e2fsck -D. [ 1003.443881][T12022] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3115: checksumming directory block 0 [ 1003.464145][T12022] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3115: No space for directory leaf checksum. Please run e2fsck -D. [ 1003.552935][T12022] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3115: checksumming directory block 0 [ 1003.667002][ T58] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1003.833551][ T624] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1004.177529][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 1004.301043][ T624] usb 5-1: Using ep0 maxpacket: 8 [ 1004.331154][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.351149][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.360747][ T58] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1004.381000][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.390059][ T58] usb 2-1: config 0 descriptor?? [ 1004.431089][ T624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.451145][ T624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.460693][ T624] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1004.481036][ T624] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 1004.489893][ T624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.512329][ T624] usb 5-1: config 0 descriptor?? [ 1004.892363][ T58] lenovo 0003:17EF:6067.0006: unknown main item tag 0x0 [ 1004.990218][T12078] loop0: detected capacity change from 0 to 16 [ 1005.053882][T12078] erofs: Unknown parameter 'ÿÿÿÿ' [ 1005.151923][ T624] wacom 0003:056A:00B5.0007: item fetching failed at offset 7/11 [ 1005.162806][ T58] lenovo 0003:17EF:6067.0006: item fetching failed at offset 5/7 [ 1005.170559][ T58] lenovo 0003:17EF:6067.0006: hid_parse failed [ 1005.177020][ T624] wacom 0003:056A:00B5.0007: parse failed [ 1005.184318][ T624] wacom: probe of 0003:056A:00B5.0007 failed with error -22 [ 1005.191618][ T58] lenovo: probe of 0003:17EF:6067.0006 failed with error -22 [ 1005.204433][ T624] usb 5-1: USB disconnect, device number 13 [ 1005.211585][ T58] usb 2-1: USB disconnect, device number 11 [ 1005.521030][ T1091] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1005.678264][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 1005.788604][T12112] loop0: detected capacity change from 0 to 16 [ 1005.794751][ T1091] usb 4-1: Using ep0 maxpacket: 32 [ 1005.861751][T12112] erofs: Unknown parameter 'ÿÿÿÿ' [ 1005.941111][ T1091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.952290][ T1091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.962404][ T1091] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1005.984796][ T1091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.992959][ T624] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1006.005363][ T1091] usb 4-1: config 0 descriptor?? [ 1006.251045][ T624] usb 2-1: Using ep0 maxpacket: 16 [ 1006.401125][ T624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.412006][ T624] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1006.424587][ T624] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1006.433398][ T624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.442776][ T624] usb 2-1: config 0 descriptor?? [ 1006.482740][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.490397][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.497339][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.504251][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.511150][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.517995][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.524891][ T1091] uclogic 0003:28BD:0094.0008: unknown main item tag 0x0 [ 1006.531854][ T1091] uclogic 0003:28BD:0094.0008: No inputs registered, leaving [ 1006.539574][ T1091] uclogic 0003:28BD:0094.0008: hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input0 [ 1006.685885][ T58] usb 4-1: USB disconnect, device number 12 [ 1007.431266][ T624] kye 0003:0458:5015.0009: collection stack underflow [ 1007.438041][ T624] kye 0003:0458:5015.0009: item 0 2 0 12 parsing failed [ 1007.445222][ T624] kye 0003:0458:5015.0009: parse failed [ 1007.450660][ T624] kye: probe of 0003:0458:5015.0009 failed with error -22 [ 1007.458844][ T624] usb 2-1: USB disconnect, device number 12 [ 1007.490108][T12136] loop0: detected capacity change from 0 to 256 [ 1007.507268][T12138] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1007.545703][ T30] audit: type=1400 audit(1733162316.620:3468): avc: denied { bind } for pid=12139 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1007.564283][T12136] exfat: Deprecated parameter 'namecase' [ 1007.660020][ T30] audit: type=1400 audit(1733162316.730:3469): avc: denied { setopt } for pid=12156 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1007.680011][T12136] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1008.399239][T12167] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1008.432189][T12167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1008.561937][T12175] loop0: detected capacity change from 0 to 128 [ 1008.789184][T12175] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1008.915459][T12175] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1008.982261][T12189] overlayfs: workdir and upperdir must be separate subtrees [ 1009.131767][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 1009.181085][ T30] audit: type=1400 audit(1733162318.250:3470): avc: denied { mount } for pid=12208 comm="syz.2.3190" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1009.220275][ T30] audit: type=1400 audit(1733162318.250:3471): avc: denied { remount } for pid=12208 comm="syz.2.3190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1009.240476][ T30] audit: type=1400 audit(1733162318.290:3472): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1010.080249][T12234] loop0: detected capacity change from 0 to 512 [ 1010.131578][T12240] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 1010.141266][T12240] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev fuse, type fuse) errno=-22 [ 1010.157107][T12239] overlayfs: failed to resolve './file1': -2 [ 1010.171859][T12234] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1013.397630][ T3492] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1013.678730][T12300] loop0: detected capacity change from 0 to 256 [ 1013.721021][ T3492] usb 4-1: Using ep0 maxpacket: 16 [ 1013.752186][T12300] exfat: Deprecated parameter 'utf8' [ 1013.757385][T12300] exfat: Deprecated parameter 'utf8' [ 1013.847566][ T3492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.859237][T12300] exfat: Deprecated parameter 'utf8' [ 1013.876382][ T3492] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 1013.911777][T12300] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1013.943514][ T3492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.994638][ T3492] usb 4-1: config 0 descriptor?? [ 1014.634987][ T3492] wacom 0003:056A:0026.000A: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 1014.648592][ T3492] wacom 0003:056A:0026.000A: hidraw0: USB HID v0.00 Device [HID 056a:0026] on usb-dummy_hcd.3-1/input0 [ 1014.691323][ T3492] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0026.000A/input/input25 [ 1015.132085][ T3492] usb 4-1: USB disconnect, device number 13 [ 1015.747233][T12344] loop0: detected capacity change from 0 to 512 [ 1015.872541][T12344] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1017.011634][ T30] audit: type=1400 audit(1733162326.090:3473): avc: denied { write } for pid=12360 comm="syz.1.3244" name="usbmon1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1017.063909][ T30] audit: type=1400 audit(1733162326.110:3474): avc: denied { map } for pid=12360 comm="syz.1.3244" path="/dev/usbmon1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1017.105695][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1017.246682][T12380] loop0: detected capacity change from 0 to 512 [ 1017.601870][T12380] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1017.801611][ T30] audit: type=1326 audit(1733162326.880:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.3.3257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41cf51ff19 code=0x0 [ 1018.600753][T12410] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1018.654677][T12416] netlink: 'syz.4.3266': attribute type 5 has an invalid length. [ 1018.835490][T12420] loop0: detected capacity change from 0 to 2048 [ 1019.003543][T12434] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1019.006315][T12420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1019.701105][ T3492] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1019.725157][T12457] loop0: detected capacity change from 0 to 128 [ 1019.823168][T12457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1019.834301][T12457] ext4 filesystem being mounted at /647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.881389][T12457] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 1020.055024][ T30] audit: type=1400 audit(1733162329.130:3476): avc: denied { module_load } for pid=12474 comm="syz.1.3291" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 1020.097738][T12475] kernel read not supported for file /policy (pid: 12475 comm: syz.1.3291) [ 1020.205174][ T3492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.241350][ T3492] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1020.402007][ T3492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.467819][ T3492] usb 3-1: config 0 descriptor?? [ 1020.638548][T12507] loop0: detected capacity change from 0 to 512 [ 1020.659762][T12507] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1021.020192][ T3492] logitech 0003:046D:C294.000B: unknown main item tag 0x0 [ 1021.027468][ T3492] logitech 0003:046D:C294.000B: item fetching failed at offset 2/3 [ 1021.084350][ T3492] logitech 0003:046D:C294.000B: parse failed [ 1021.090246][ T3492] logitech: probe of 0003:046D:C294.000B failed with error -22 [ 1021.519981][ T3492] usb 3-1: USB disconnect, device number 16 [ 1021.911557][T12526] loop0: detected capacity change from 0 to 512 [ 1022.548125][T12526] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1025.369209][T12570] netlink: 'syz.3.3325': attribute type 4 has an invalid length. [ 1025.376986][T12570] netlink: 3649 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1025.391054][ T624] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1025.870421][T12578] loop0: detected capacity change from 0 to 128 [ 1026.219707][T12578] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1026.237587][T12578] ext4 filesystem being mounted at /659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.372002][T12597] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 1026.694373][T12640] loop0: detected capacity change from 0 to 16 [ 1026.762161][T12640] erofs: (device loop0): erofs_read_inode: unsupported i_format 16 of nid 36 [ 1027.686863][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1027.694343][ T624] usb 5-1: device descriptor read/64, error -71 [ 1027.776242][T12650] loop0: detected capacity change from 0 to 128 [ 1027.803203][T12650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1027.814548][T12650] ext4 filesystem being mounted at /671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.816904][ T3492] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1027.865003][ T30] audit: type=1400 audit(1733162336.940:3477): avc: denied { ioctl } for pid=12649 comm="syz.0.3358" path="/671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1028.241156][ T3492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.253274][ T3492] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1028.263628][ T3492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.272275][T12665] loop0: detected capacity change from 0 to 512 [ 1028.279652][ T3492] usb 3-1: config 0 descriptor?? [ 1028.293006][T12665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1028.303887][T12665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 1028.311910][T12665] System zones: 1-12 [ 1028.316393][T12665] EXT4-fs (loop0): 1 truncate cleaned up [ 1028.322175][T12665] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1028.401189][ T58] usb 2-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1028.410220][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.423033][ T58] usb 2-1: config 0 descriptor?? [ 1028.471166][ T624] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1028.480042][ T624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.490276][ T624] usb 5-1: config 0 descriptor?? [ 1029.971077][ T3492] usbhid 3-1:0.0: can't add hid device: -71 [ 1029.976862][ T3492] usbhid: probe of 3-1:0.0 failed with error -71 [ 1030.061117][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 1030.064580][ T3492] usb 3-1: USB disconnect, device number 17 [ 1030.066896][ T58] usbhid: probe of 2-1:0.0 failed with error -71 [ 1030.091056][ T624] usbhid 5-1:0.0: can't add hid device: -71 [ 1030.096836][ T624] usbhid: probe of 5-1:0.0 failed with error -71 [ 1030.105695][ T58] usb 2-1: USB disconnect, device number 13 [ 1030.792961][ T624] usb 5-1: USB disconnect, device number 14 [ 1030.941070][T12083] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1031.380437][ T30] audit: type=1400 audit(1733162340.450:3478): avc: denied { remount } for pid=12732 comm="syz.1.3388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1031.402078][T12736] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 1031.431402][T12736] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 1031.697568][T12745] loop0: detected capacity change from 0 to 256 [ 1031.751911][T12083] usb 4-1: Using ep0 maxpacket: 16 [ 1032.093670][T12756] loop0: detected capacity change from 0 to 512 [ 1032.106575][T12756] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1032.241033][ T694] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1032.557997][ T694] usb 5-1: Using ep0 maxpacket: 16 [ 1032.581125][T12083] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1032.590080][T12083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.597874][T12083] usb 4-1: Product: syz [ 1032.602062][T12083] usb 4-1: Manufacturer: syz [ 1032.606488][T12083] usb 4-1: SerialNumber: syz [ 1032.612017][T12083] r8152-cfgselector 4-1: config 0 descriptor?? [ 1032.681124][ T694] usb 5-1: config 0 has no interfaces? [ 1032.841227][ T694] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 1032.850157][ T694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1032.858209][ T694] usb 5-1: Product: syz [ 1032.862252][ T694] usb 5-1: Manufacturer: syz [ 1032.866621][ T694] usb 5-1: SerialNumber: syz [ 1032.871953][ T694] r8152-cfgselector 5-1: config 0 descriptor?? [ 1033.091117][T12083] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1033.097299][T12083] r8152-cfgselector 4-1: bad CDC descriptors [ 1033.335644][T12083] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1033.342483][ T3768] usb 5-1: config 0 descriptor?? [ 1033.347840][T12083] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 1033.411102][ T624] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1033.418539][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1033.432195][T12726] usb 5-1: USB disconnect, device number 15 [ 1033.441266][ T3768] usb 5-1: can't set config #0, error -71 [ 1033.595100][T12781] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1033.661123][ T624] usb 3-1: Using ep0 maxpacket: 8 [ 1034.281188][ T58] usb 2-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1034.291449][ T624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.302499][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1034.312089][ T624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.322259][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.334438][ T624] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1034.343599][ T624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.352057][ T58] usb 2-1: config 0 descriptor?? [ 1034.357887][ T624] usb 3-1: config 0 descriptor?? [ 1034.845557][ T58] usb 2-1: USB disconnect, device number 14 [ 1034.911976][ T624] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 1034.919023][ T624] lenovo 0003:17EF:6067.000C: item fetching failed at offset 5/7 [ 1034.926804][ T624] lenovo 0003:17EF:6067.000C: hid_parse failed [ 1034.932978][ T624] lenovo: probe of 0003:17EF:6067.000C failed with error -22 [ 1035.001013][ T694] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1035.131306][ T3492] usb 3-1: USB disconnect, device number 18 [ 1035.291061][ T694] usb 4-1: Using ep0 maxpacket: 8 [ 1036.232848][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.254388][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.265657][ T694] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1036.274778][T12831] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 1036.274818][T12831] SELinux: failed to load policy [ 1036.354693][ T694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.367759][ T694] usb 4-1: config 0 descriptor?? [ 1037.786002][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.798207][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.810363][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.823439][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.834386][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.846387][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.857466][ T694] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1037.874696][ T694] a4tech 0003:09DA:0006.000D: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.3-1/input0 [ 1037.998843][ T624] usb 4-1: USB disconnect, device number 15 [ 1038.980455][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1039.301034][ T694] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1041.113712][T12957] netlink: 'syz.4.3474': attribute type 15 has an invalid length. [ 1041.182916][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1041.401137][ T694] usb 2-1: Using ep0 maxpacket: 16 [ 1041.521178][ T694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.542545][ T694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.571020][ T694] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1041.580078][ T694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.598734][ T694] usb 2-1: config 0 descriptor?? [ 1042.092533][ T694] hid-generic 0003:041E:3100.000E: unexpected long global item [ 1042.100125][ T694] hid-generic: probe of 0003:041E:3100.000E failed with error -22 [ 1042.325888][ T694] usb 2-1: USB disconnect, device number 15 [ 1043.506235][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1044.031433][T13005] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1044.053925][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1044.103283][T13010] loop0: detected capacity change from 0 to 1024 [ 1044.162198][T13010] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1044.180047][T13010] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1044.367597][T13027] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1044.376639][T13027] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1044.412218][T13030] loop0: detected capacity change from 0 to 512 [ 1044.421085][ T694] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1044.525718][T13030] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1044.671068][ T694] usb 3-1: Using ep0 maxpacket: 8 [ 1044.831290][ T694] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1044.847918][ T694] usb 3-1: config 179 has no interface number 0 [ 1044.880662][ T694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1044.898367][ T694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1044.921109][ T694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1044.942381][ T694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1045.034470][ T694] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1045.048271][ T694] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1045.064975][ T694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.091161][T13016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1045.481414][T13062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1045.512177][T13067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3515'. [ 1045.618248][ T30] audit: type=1400 audit(1733162354.690:3479): avc: denied { append } for pid=13072 comm="syz.4.3520" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1045.661840][ T694] usb 3-1: USB disconnect, device number 19 [ 1045.681045][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1045.928697][T13085] loop0: detected capacity change from 0 to 512 [ 1046.022310][T13085] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1046.075062][T13100] syz.1.3529[13100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.075127][T13100] syz.1.3529[13100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.068244][T13128] loop0: detected capacity change from 0 to 1024 [ 1047.113940][T13136] syz.4.3544[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.114025][T13136] syz.4.3544[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.134807][T13128] EXT4-fs (loop0): Ignoring removed orlov option [ 1047.198087][T13128] EXT4-fs (loop0): Ignoring removed nobh option [ 1047.446937][T13128] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,orlov,barrier=0x0000000000000004,nobh,nojournal_checksum,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 1047.542265][ T30] audit: type=1400 audit(1733162356.620:3480): avc: denied { setattr } for pid=13126 comm="syz.0.3539" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1049.189390][T13173] loop0: detected capacity change from 0 to 512 [ 1049.260354][T13183] syz.1.3558[13183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1049.260442][T13183] syz.1.3558[13183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1049.651660][T13173] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1050.893777][T13207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1050.943086][T13207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.000917][ T30] audit: type=1400 audit(1733162360.070:3481): avc: denied { bind } for pid=13212 comm="syz.4.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1051.195934][ T1824] Bluetooth: hci0: Frame reassembly failed (-84) [ 1051.262995][ T3492] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1053.996691][ T58] Bluetooth: hci0: command 0x1003 tx timeout [ 1054.009886][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 1055.170806][ T3492] usb 3-1: device not accepting address 20, error -71 [ 1055.559094][T13269] loop0: detected capacity change from 0 to 40427 [ 1055.643594][T13269] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1055.650479][T13269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1055.661232][T13269] F2FS-fs (loop0): invalid crc value [ 1055.668080][T13269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1055.705689][T13269] F2FS-fs (loop0): Start checkpoint disabled! [ 1055.713974][T13269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1055.720894][T13269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1057.139626][ T58] Bluetooth: hci0: command 0x1001 tx timeout [ 1057.145697][ T9009] Bluetooth: hci0: sending frame failed (-49) [ 1057.301862][ T30] audit: type=1400 audit(1733162366.350:3482): avc: denied { execute } for pid=13305 comm="syz.2.3597" dev="tmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1057.448668][ T30] audit: type=1400 audit(1733162366.350:3483): avc: denied { execute_no_trans } for pid=13305 comm="syz.2.3597" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1057.632571][T13321] syz.0.3603[13321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.632629][T13321] syz.0.3603[13321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.687155][ T30] audit: type=1400 audit(1733162366.760:3484): avc: denied { map } for pid=13324 comm="syz.0.3605" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.721940][ T58] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1058.001305][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 1058.121111][ T58] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1058.130129][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.142067][ T58] usb 4-1: config 0 descriptor?? [ 1059.395861][ T58] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1059.405428][ T624] Bluetooth: hci0: command 0x1009 tx timeout [ 1059.421141][ T58] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1059.431806][ T58] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1059.442191][ T58] asix: probe of 4-1:0.0 failed with error -71 [ 1059.450346][ T58] usb 4-1: USB disconnect, device number 16 [ 1059.494329][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1062.324211][T13420] syz.2.3642[13420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.324295][T13420] syz.2.3642[13420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.377930][T13426] bridge0: port 3(syz_tun) entered blocking state [ 1062.415688][T13426] bridge0: port 3(syz_tun) entered disabled state [ 1062.424625][T13426] device syz_tun entered promiscuous mode [ 1062.430485][T13426] bridge0: port 3(syz_tun) entered blocking state [ 1062.436803][T13426] bridge0: port 3(syz_tun) entered forwarding state [ 1062.813637][T13439] loop0: detected capacity change from 0 to 512 [ 1062.830323][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1062.846194][T13439] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1063.301542][T13455] tipc: Started in network mode [ 1063.306285][T13455] tipc: Node identity ., cluster identity 4711 [ 1063.312571][T13455] tipc: Enabling of bearer rejected, failed to enable media [ 1064.959693][T13495] loop0: detected capacity change from 0 to 512 [ 1065.222008][T13495] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1065.738068][T13508] netlink: 'syz.1.3676': attribute type 16 has an invalid length. [ 1067.548920][T13548] syz.3.3692[13548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1067.549000][T13548] syz.3.3692[13548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1067.610813][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1069.058950][ T624] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1069.091603][T13589] loop0: detected capacity change from 0 to 512 [ 1069.112289][T13589] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1071.511080][ T624] usb 3-1: unable to read config index 0 descriptor/all [ 1071.520605][ T624] usb 3-1: can't read configurations, error -71 [ 1072.039352][T13675] loop0: detected capacity change from 0 to 512 [ 1072.109354][T13675] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1074.244347][T13700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1074.344846][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 1074.358126][T13714] tipc: Enabling of bearer rejected, failed to enable media [ 1074.448966][T13724] tipc: Started in network mode [ 1074.455577][T13724] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1074.467526][T13724] tipc: Enabling of bearer rejected, failed to enable media [ 1074.500997][ T624] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1074.722444][T13746] loop0: detected capacity change from 0 to 40427 [ 1074.741042][ T624] usb 3-1: Using ep0 maxpacket: 32 [ 1074.801285][T13746] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1074.817795][T13746] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1074.837216][T13746] F2FS-fs (loop0): invalid crc value [ 1074.858463][T13746] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1074.901104][ T624] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.912240][ T624] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.922459][ T624] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1074.931733][ T624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.945339][T13746] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1074.952352][T13746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1074.981702][ T624] hub 3-1:4.0: USB hub found [ 1075.094928][ T30] audit: type=1326 audit(1733162384.170:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.0.3773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7ce6e3f19 code=0x0 [ 1075.211099][ T624] hub 3-1:4.0: 28 ports detected [ 1075.216074][ T624] usb 3-1: selecting invalid altsetting 1 [ 1075.221685][ T624] hub 3-1:4.0: Using single TT (err -22) [ 1075.241083][ T624] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1076.431988][ T624] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1076.438185][ T624] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1076.482215][ T624] usb 3-1: USB disconnect, device number 23 [ 1076.566080][T13786] loop0: detected capacity change from 0 to 256 [ 1076.721737][T13786] FAT-fs (loop0): Directory bread(block 64) failed [ 1076.753242][T13786] FAT-fs (loop0): Directory bread(block 65) failed [ 1076.868306][T13786] FAT-fs (loop0): Directory bread(block 66) failed [ 1076.897807][T13786] FAT-fs (loop0): Directory bread(block 67) failed [ 1076.906071][T13786] FAT-fs (loop0): Directory bread(block 68) failed [ 1076.918112][T13786] FAT-fs (loop0): Directory bread(block 69) failed [ 1076.927294][T13786] FAT-fs (loop0): Directory bread(block 70) failed [ 1076.935674][T13786] FAT-fs (loop0): Directory bread(block 71) failed [ 1076.943856][T13786] FAT-fs (loop0): Directory bread(block 72) failed [ 1076.950275][T13786] FAT-fs (loop0): Directory bread(block 73) failed [ 1077.036578][T13804] loop0: detected capacity change from 0 to 512 [ 1077.151748][T13804] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1078.003452][T13830] tipc: Enabling of bearer rejected, failed to enable media [ 1078.161047][T12083] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1078.989107][T13856] loop0: detected capacity change from 0 to 512 [ 1079.014781][T13856] EXT4-fs (loop0): Ignoring removed orlov option [ 1079.023308][T13856] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1079.030153][T13856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3810: bg 0: block 248: padding at end of block bitmap is not set [ 1079.044906][T13856] Quota error (device loop0): write_blk: dquota write failed [ 1079.052315][T13856] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1079.062154][T13856] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.3810: Failed to acquire dquot type 1 [ 1079.073547][T12083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.074306][T13856] EXT4-fs (loop0): 1 truncate cleaned up [ 1079.084293][T12083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.084353][T12083] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1079.090529][T13856] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 1079.099352][T12083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.137388][T12083] usb 2-1: config 0 descriptor?? [ 1079.321016][ T694] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1080.776710][T13889] loop0: detected capacity change from 0 to 512 [ 1080.785312][T13890] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1080.811585][ T3492] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1080.881182][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.881878][ T30] audit: type=1400 audit(1733162389.960:3486): avc: denied { remount } for pid=13897 comm="syz.4.3825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1080.893943][T13889] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1080.912088][T12083] hid-led: probe of 0003:27B8:01ED.000F failed with error -71 [ 1080.927918][ T694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.937621][T12083] usb 2-1: USB disconnect, device number 16 [ 1080.951060][ T694] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1080.957927][ T30] audit: type=1400 audit(1733162390.020:3487): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1080.979900][ T694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.990553][ T694] usb 4-1: config 0 descriptor?? [ 1080.996034][ T3492] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1082.164586][ T694] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 1082.171234][ T694] arvo 0003:1E7D:30D4.0010: unbalanced collection at end of report description [ 1082.201217][ T624] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1082.246444][ T694] arvo 0003:1E7D:30D4.0010: parse failed [ 1082.252181][ T694] arvo: probe of 0003:1E7D:30D4.0010 failed with error -22 [ 1082.474497][ T694] usb 4-1: USB disconnect, device number 17 [ 1082.704630][T13953] loop0: detected capacity change from 0 to 512 [ 1082.758704][T13953] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1082.781002][ T624] usb 5-1: Using ep0 maxpacket: 16 [ 1082.911132][ T624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.925941][ T624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.935598][ T624] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1082.948269][ T624] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1082.957136][ T624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.965890][ T624] usb 5-1: config 0 descriptor?? [ 1084.121081][ T624] usb 5-1: can't set config #0, error -71 [ 1084.130213][ T624] usb 5-1: USB disconnect, device number 16 [ 1084.139027][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1086.296158][T14022] netlink: 'syz.1.3875': attribute type 46 has an invalid length. [ 1086.303931][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1086.430993][ T624] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1088.041034][ T624] usb 4-1: Using ep0 maxpacket: 8 [ 1088.231108][ T3492] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1088.431166][ T624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1088.521096][ T624] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1088.529157][ T624] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1088.537647][ T624] usb 4-1: config 4 has no interface number 0 [ 1088.591140][ T3492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.601926][ T3492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.611474][ T3492] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1088.620274][ T3492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.628755][ T3492] usb 3-1: config 0 descriptor?? [ 1088.841109][ T624] usb 4-1: string descriptor 0 read error: -22 [ 1088.847194][ T624] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1088.864791][ T624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.911920][ T624] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 1088.926896][ T624] usb 4-1: No valid video chain found. [ 1089.156902][ T3492] hid-multitouch 0003:0EEF:72D0.0011: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 1089.284754][ T624] usb 4-1: USB disconnect, device number 18 [ 1089.347655][T14083] tipc: Enabling of bearer rejected, failed to enable media [ 1089.359704][ T3492] usb 3-1: USB disconnect, device number 24 [ 1090.590119][T14098] tipc: Invalid UDP bearer configuration [ 1090.590143][T14098] tipc: Enabling of bearer rejected, failed to enable media [ 1090.617966][ T30] audit: type=1400 audit(1733162399.690:3488): avc: denied { mounton } for pid=14101 comm="syz.4.3905" path="/803/file0" dev="configfs" ino=13198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.642484][T14102] incfs: Can't find or create .index dir in ./file0 [ 1090.649045][T14102] incfs: mount failed -1 [ 1090.659422][ T30] audit: type=1400 audit(1733162399.720:3489): avc: denied { search } for pid=14101 comm="syz.4.3905" name="/" dev="configfs" ino=13198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.682645][ T30] audit: type=1400 audit(1733162399.720:3490): avc: denied { write } for pid=14101 comm="syz.4.3905" name="/" dev="configfs" ino=13198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.781896][T14114] No source specified [ 1091.814797][ T30] audit: type=1400 audit(1733162400.890:3491): avc: denied { setopt } for pid=14132 comm="syz.0.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1091.896170][ T30] audit: type=1400 audit(1733162400.920:3492): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1092.040653][T14140] loop0: detected capacity change from 0 to 512 [ 1092.571515][T14140] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1092.700999][ T624] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1092.708580][T12083] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1094.052969][ T624] usb 3-1: Using ep0 maxpacket: 16 [ 1094.082752][T14171] binder: Binderfs stats mode cannot be changed during a remount [ 1094.121174][ T624] usb 3-1: device descriptor read/all, error -71 [ 1094.127589][T12083] usb 5-1: device descriptor read/all, error -71 [ 1094.155566][T14183] netlink: 'syz.0.3938': attribute type 24 has an invalid length. [ 1094.163361][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 1095.203985][ T30] audit: type=1400 audit(1733162404.280:3493): avc: denied { read } for pid=14202 comm="syz.0.3943" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1096.198661][T14218] netlink: 'syz.0.3949': attribute type 8 has an invalid length. [ 1096.332341][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1097.458686][ T30] audit: type=1400 audit(1733162406.520:3494): avc: denied { write } for pid=14246 comm="syz.3.3960" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1097.810592][T14253] loop0: detected capacity change from 0 to 512 [ 1097.952373][T14253] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1098.222292][T12726] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1098.768697][T14285] loop0: detected capacity change from 0 to 4096 [ 1098.814102][T14285] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1098.843803][ T30] audit: type=1400 audit(1733162407.920:3495): avc: denied { ioctl } for pid=14284 comm="syz.0.3974" path="/806/file1/file3" dev="loop0" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1098.852411][ T3492] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1098.868721][T14285] fs-verity: sha256 using implementation "sha256-avx2" [ 1098.951127][T12083] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1098.991091][T12726] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.002410][T12726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1099.008843][T12726] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1099.018140][T12726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.030664][T12726] usb 4-1: config 0 descriptor?? [ 1099.164857][ T3492] usb 3-1: Using ep0 maxpacket: 16 [ 1099.288201][ T3492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1099.451118][ T3492] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1099.460109][ T3492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.468087][ T3492] usb 3-1: Product: syz [ 1099.472125][ T3492] usb 3-1: Manufacturer: syz [ 1099.476536][ T3492] usb 3-1: SerialNumber: syz [ 1099.481957][ T3492] usb 3-1: config 0 descriptor?? [ 1099.514859][T12726] wacom 0003:056A:0084.0012: hidraw0: USB HID v0.06 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 1099.522522][ T3492] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1099.541080][T12083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.551916][T12083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.561560][T12083] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1099.570487][T12083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.579040][T12083] usb 5-1: config 0 descriptor?? [ 1099.712272][T12726] usb 4-1: USB disconnect, device number 19 [ 1099.728767][ T624] usb 3-1: USB disconnect, device number 27 [ 1100.237808][T12083] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 1100.244960][T12083] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 1100.251810][T12083] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 1100.258529][T12083] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 1100.266866][T12083] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0 [ 1100.274683][T12083] lenovo 0003:17EF:6047.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1100.321075][T12083] lenovo 0003:17EF:6047.0013: Failed to switch F7/9/11 mode: -71 [ 1100.351055][T12083] lenovo 0003:17EF:6047.0013: Failed to switch middle button: -71 [ 1100.371102][T12083] lenovo 0003:17EF:6047.0013: Fn-lock setting failed: -71 [ 1100.391045][T12083] lenovo 0003:17EF:6047.0013: Sensitivity setting failed: -71 [ 1101.920346][T12083] usb 5-1: USB disconnect, device number 19 [ 1102.138122][ T30] audit: type=1400 audit(1733162411.200:3496): avc: denied { write } for pid=14355 comm="syz.3.4002" name="file0" dev="tmpfs" ino=4337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1102.538454][ T30] audit: type=1400 audit(1733162411.610:3497): avc: denied { connect } for pid=14375 comm="syz.0.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1103.005352][T14395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4017'. [ 1105.547914][T14410] overlayfs: missing 'workdir' [ 1106.131556][T12726] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1106.660980][T12083] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1106.721042][T12726] usb 2-1: Using ep0 maxpacket: 32 [ 1107.021067][T12726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.034020][T12726] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1107.042923][T12726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.051376][T12726] usb 2-1: config 0 descriptor?? [ 1107.057423][T14451] loop0: detected capacity change from 0 to 16 [ 1107.101521][T14451] erofs: Unknown parameter 'ÿÿÿÿ' [ 1107.193547][T14451] overlayfs: missing 'workdir' [ 1107.231366][T12083] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.241592][T12083] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.252557][T12083] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1107.262233][T12083] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.274985][T12083] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1107.283874][T12083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.342094][T12083] usb 5-1: invalid MIDI out EP 0 [ 1107.347204][T12083] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1107.533656][T12726] dragonrise 0003:0079:0006.0014: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 1107.554686][T12726] dragonrise 0003:0079:0006.0014: no inputs found [ 1107.561303][T12726] dragonrise 0003:0079:0006.0014: force feedback init failed [ 1107.570637][T12726] usb 5-1: USB disconnect, device number 20 [ 1107.884399][ T694] usb 2-1: USB disconnect, device number 17 [ 1107.912126][ T3492] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1108.291564][ T3492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.303177][ T3492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.314923][ T3492] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1108.379454][ T3492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.396324][ T3492] usb 4-1: config 0 descriptor?? [ 1109.058809][T12083] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1109.068431][T12083] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1109.079856][T12083] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1109.109469][ T3492] apple 0003:05AC:024B.0016: unbalanced delimiter at end of report description [ 1109.118875][ T3492] apple 0003:05AC:024B.0016: parse failed [ 1109.124561][ T3492] apple: probe of 0003:05AC:024B.0016 failed with error -22 [ 1109.223961][ T3492] usb 4-1: USB disconnect, device number 20 [ 1109.795614][T14503] usb usb8: usbfs: process 14503 (syz.1.4055) did not claim interface 0 before use [ 1109.951001][T12726] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1110.037338][T14523] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1110.044983][T14523] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1110.141014][T12083] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1110.321023][ T694] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1110.521118][T12726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.531935][T12726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.541582][T12726] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1110.550335][T12726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.558966][T12726] usb 5-1: config 0 descriptor?? [ 1110.562971][ T694] usb 4-1: Using ep0 maxpacket: 16 [ 1110.701112][T12083] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1110.709255][T12083] usb 2-1: config 220 has an invalid descriptor of length 203, skipping remainder of the config [ 1110.719517][T12083] usb 2-1: config 220 has no interface number 2 [ 1110.725589][T12083] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1110.738562][T12083] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1110.745135][T12083] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1110.751822][T12083] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1110.841134][ T694] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1110.850147][ T694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.858162][ T694] usb 4-1: Product: syz [ 1110.862228][ T694] usb 4-1: Manufacturer: syz [ 1110.866585][ T694] usb 4-1: SerialNumber: syz [ 1110.872113][ T694] r8152-cfgselector 4-1: config 0 descriptor?? [ 1110.921109][T12083] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1110.930075][T12083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.954560][T12083] usb 2-1: Product: syz [ 1110.959967][T12083] usb 2-1: Manufacturer: syz [ 1110.967833][T14536] loop0: detected capacity change from 0 to 512 [ 1110.973949][T12083] usb 2-1: SerialNumber: syz [ 1111.003384][T14536] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1111.003750][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1111.033595][T14544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1111.043558][T12726] pyra 0003:1E7D:2CF6.0017: unbalanced collection at end of report description [ 1111.054531][T12726] pyra 0003:1E7D:2CF6.0017: parse failed [ 1111.060010][T12726] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -22 [ 1111.302417][ T3492] usb 5-1: USB disconnect, device number 21 [ 1111.361154][ T694] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1111.408131][ T694] r8152-cfgselector 4-1: bad CDC descriptors [ 1111.442099][T14557] overlayfs: failed to resolve './file1': -2 [ 1111.461304][ T694] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1111.468621][ T694] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 1111.621272][T12083] usb 2-1: selecting invalid altsetting 0 [ 1111.626960][T12083] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1111.633342][T12083] usb 2-1: No valid video chain found. [ 1111.712689][T12083] usb 2-1: USB disconnect, device number 18 [ 1111.910075][T14571] tipc: Enabling of bearer rejected, failed to enable media [ 1113.602902][T14593] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 1113.619640][T14597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.626711][T14597] IPv6: NLM_F_CREATE should be set when creating new route [ 1113.633760][T14597] IPv6: NLM_F_CREATE should be set when creating new route [ 1114.755401][T14639] tipc: Enabling of bearer rejected, failed to enable media [ 1114.807841][T14652] xt_hashlimit: size too large, truncated to 1048576 [ 1114.854189][T14657] netlink: 'syz.3.4118': attribute type 2 has an invalid length. [ 1115.696741][T14673] netlink: 79 bytes leftover after parsing attributes in process `syz.4.4123'. [ 1116.044215][T12726] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1117.822458][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1119.276360][T14748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1119.321042][T12726] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1120.176774][T14769] loop0: detected capacity change from 0 to 256 [ 1120.330967][T12726] usb 2-1: Using ep0 maxpacket: 16 [ 1120.339172][T14769] FAT-fs (loop0): Directory bread(block 64) failed [ 1120.347297][T14769] FAT-fs (loop0): Directory bread(block 65) failed [ 1120.353954][T14769] FAT-fs (loop0): Directory bread(block 66) failed [ 1120.360345][T14769] FAT-fs (loop0): Directory bread(block 67) failed [ 1120.368630][T14769] FAT-fs (loop0): Directory bread(block 68) failed [ 1120.375426][T14769] FAT-fs (loop0): Directory bread(block 69) failed [ 1120.382012][T14769] FAT-fs (loop0): Directory bread(block 70) failed [ 1120.388384][T14769] FAT-fs (loop0): Directory bread(block 71) failed [ 1120.407240][T14769] FAT-fs (loop0): Directory bread(block 72) failed [ 1120.423361][T14769] FAT-fs (loop0): Directory bread(block 73) failed [ 1120.451072][T12726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.809922][T14790] loop0: detected capacity change from 0 to 512 [ 1120.892080][T14790] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1120.904444][T14798] tipc: Enabling of bearer rejected, failed to enable media [ 1121.514598][T12726] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1121.523717][T12726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.531765][T12726] usb 2-1: Product: syz [ 1121.537197][T12726] usb 2-1: Manufacturer: syz [ 1121.541788][T12726] usb 2-1: SerialNumber: syz [ 1121.552583][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1121.745654][T14818] syz.3.4176[14818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1121.747768][T14818] syz.3.4176[14818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1121.941026][T12726] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1121.981437][T14830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4182'. [ 1122.001061][T12726] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1122.009553][T12726] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 1122.033525][T14834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1122.060971][T14834] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1122.097847][T14834] netlink: 'syz.1.4183': attribute type 6 has an invalid length. [ 1122.109694][T14842] netlink: 'syz.2.4188': attribute type 3 has an invalid length. [ 1122.122870][T14834] netlink: 'syz.1.4183': attribute type 4 has an invalid length. [ 1125.473254][T14895] loop0: detected capacity change from 0 to 512 [ 1125.481074][T12726] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1125.649280][T14895] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1127.765593][T12726] usb 3-1: Using ep0 maxpacket: 32 [ 1127.812073][T14933] loop0: detected capacity change from 0 to 256 [ 1128.017919][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4224'. [ 1128.231063][T12726] usb 3-1: unable to read config index 0 descriptor/all [ 1128.238242][T12726] usb 3-1: can't read configurations, error -71 [ 1128.292227][ T30] audit: type=1400 audit(1733162437.370:3498): avc: denied { write } for pid=14957 comm="syz.0.4233" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1128.338664][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4235'. [ 1128.411655][T14976] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4241'. [ 1128.420897][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'. [ 1128.514488][ T30] audit: type=1400 audit(1733162437.590:3499): avc: denied { read } for pid=14990 comm="syz.4.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1128.611090][ T3492] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1128.664708][ T30] audit: type=1400 audit(1733162437.740:3500): avc: denied { nlmsg_write } for pid=15005 comm="syz.2.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1128.870973][ T1091] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1128.936091][T15032] device syz_tun entered promiscuous mode [ 1128.961417][T15031] device syz_tun left promiscuous mode [ 1128.980756][T15036] syz.4.4262[15036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.980839][T15036] syz.4.4262[15036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.981146][ T3492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.017265][ T3492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.027229][ T3492] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1129.036603][ T3492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.045441][ T3492] usb 2-1: config 0 descriptor?? [ 1129.073406][ T30] audit: type=1400 audit(1733162438.150:3501): avc: denied { setcheckreqprot } for pid=15039 comm="syz.4.4264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1129.073412][T15040] SELinux: syz.4.4264 (15040) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 1129.160983][ T1091] usb 4-1: Using ep0 maxpacket: 32 [ 1129.926067][ T3492] a4tech 0003:09DA:022B.0019: unbalanced collection at end of report description [ 1129.952210][ T3492] a4tech 0003:09DA:022B.0019: parse failed [ 1129.959288][ T3492] a4tech: probe of 0003:09DA:022B.0019 failed with error -22 [ 1129.991134][ T1091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.002476][ T1091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.012146][ T1091] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1130.029956][ T1091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.042510][ T1091] usb 4-1: config 0 descriptor?? [ 1130.124456][ T3492] usb 2-1: USB disconnect, device number 20 [ 1130.742118][ T1091] greenasia 0003:0E8F:0012.001A: item fetching failed at offset 0/3 [ 1130.750162][ T1091] greenasia 0003:0E8F:0012.001A: parse failed [ 1130.756233][ T1091] greenasia: probe of 0003:0E8F:0012.001A failed with error -22 [ 1131.213934][ T3492] usb 4-1: USB disconnect, device number 22 [ 1133.850575][T15120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1133.897279][T15122] loop0: detected capacity change from 0 to 1024 [ 1133.952059][T15122] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1133.958769][T15122] EXT4-fs (loop0): Ignoring removed orlov option [ 1133.973525][T15122] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 1134.104451][T15143] loop0: detected capacity change from 0 to 512 [ 1134.211069][ T3492] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1134.223299][T15143] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 1134.501061][ T3492] usb 3-1: Using ep0 maxpacket: 32 [ 1134.510981][T12726] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1134.651057][ T3492] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1134.659069][ T3492] usb 3-1: config 0 has no interface number 0 [ 1134.664938][ T3492] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1134.674653][ T3492] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1135.141111][T12726] usb 5-1: Using ep0 maxpacket: 8 [ 1135.161010][ T3492] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1135.171259][ T3492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.200964][ T3492] usb 3-1: Product: syz [ 1135.211175][ T3492] usb 3-1: Manufacturer: syz [ 1135.215649][ T3492] usb 3-1: SerialNumber: syz [ 1135.229819][ T3492] usb 3-1: config 0 descriptor?? [ 1135.281566][ T3492] ums-jumpshot 3-1:0.16: USB Mass Storage device detected [ 1135.291058][T12726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1135.305223][T12726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1135.318668][ T3492] ums-jumpshot 3-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 1135.324712][T12726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1135.341017][ T3492] scsi host1: usb-storage 3-1:0.16 [ 1135.347392][T12726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 99, changing to 10 [ 1135.370289][T12726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 25960, setting to 1024 [ 1135.381543][T12726] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1135.390439][T12726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.408720][T12726] usb 5-1: config 0 descriptor?? [ 1135.431029][T15132] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.437895][T15132] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.477545][T15157] loop0: detected capacity change from 0 to 40427 [ 1135.486928][ T3492] usb 3-1: USB disconnect, device number 30 [ 1136.035272][T15157] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1136.044194][T15157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1136.065591][T15157] F2FS-fs (loop0): invalid crc value [ 1136.092956][T15157] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1137.495966][ T3492] usb 5-1: USB disconnect, device number 22 [ 1137.514565][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1137.539175][T15157] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1137.570520][T15157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1137.705188][ T292] ------------[ cut here ]------------ [ 1137.710610][ T292] WARNING: CPU: 0 PID: 292 at fs/f2fs/inode.c:880 f2fs_evict_inode+0x1246/0x1520 [ 1137.719899][ T292] Modules linked in: [ 1137.981935][ T292] CPU: 1 PID: 292 Comm: syz-executor Not tainted 5.15.169-syzkaller-00123-g9efd694ed939 #0 [ 1138.231674][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1138.340534][ T292] RIP: 0010:f2fs_evict_inode+0x1246/0x1520 [ 1138.389466][ T292] Code: ff ff e8 fd fb 52 ff eb 08 e8 f6 fb 52 ff 4d 89 e5 48 8b 7c 24 10 e8 19 19 03 00 4c 8b 64 24 58 e9 b4 fc ff ff e8 da fb 52 ff <0f> 0b 4c 89 f7 be 08 00 00 00 e8 7b 56 95 ff f0 41 80 0e 04 e9 96 [ 1138.422496][T15233] binder: 15232:15233 ioctl c018620c 20000040 returned -22 [ 1138.439102][ T292] RSP: 0018:ffffc900009b78a0 EFLAGS: 00010293 [ 1138.451218][ T292] RAX: ffffffff821d6a36 RBX: 0000000000000002 RCX: ffff88810a793b40 [ 1138.464821][ T292] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 1138.474062][ T292] RBP: ffffc900009b7a10 R08: ffffffff821d66d1 R09: ffffed10252a636b [ 1138.483680][ T292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888129531880 [ 1138.491768][ T292] R13: dffffc0000000000 R14: ffff888159268078 R15: 1ffff92000136f28 [ 1138.541695][ T292] FS: 0000555570f39500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1138.552211][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1138.558868][ T292] CR2: 00007f046cd98bac CR3: 0000000125e33000 CR4: 00000000003506b0 [ 1138.566762][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1138.574665][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1138.582558][ T292] Call Trace: [ 1138.585583][ T292] [ 1138.588359][ T292] ? show_regs+0x58/0x60 [ 1138.608812][ T292] ? __warn+0x160/0x2f0 [ 1138.614184][ T292] ? f2fs_evict_inode+0x1246/0x1520 [ 1138.619228][ T292] ? report_bug+0x3d9/0x5b0 [ 1138.626294][ T292] ? f2fs_evict_inode+0x1246/0x1520 [ 1138.631874][ T292] ? handle_bug+0x41/0x70 [ 1138.638838][ T292] ? exc_invalid_op+0x1b/0x50 [ 1138.644877][ T292] ? asm_exc_invalid_op+0x1b/0x20 [ 1138.650079][ T292] ? f2fs_evict_inode+0xee1/0x1520 [ 1138.682129][ T292] ? f2fs_evict_inode+0x1246/0x1520 [ 1138.687213][ T292] ? f2fs_evict_inode+0x1246/0x1520 [ 1138.698024][ T292] ? _raw_spin_unlock+0x4d/0x70 [ 1138.702955][ T292] ? f2fs_write_inode+0x5d0/0x5d0 [ 1138.707847][ T292] ? bit_waitqueue+0x30/0x30 [ 1138.713040][ T292] ? locks_free_lock_context+0x42/0x70 [ 1138.718474][ T292] ? __destroy_inode+0x35f/0x4e0 [ 1138.739813][ T292] ? f2fs_write_inode+0x5d0/0x5d0 [ 1138.764111][ T292] evict+0x529/0x930 [ 1138.767863][ T292] ? mode_strip_sgid+0x220/0x220 [ 1138.781056][ T292] ? __kasan_check_write+0x14/0x20 [ 1138.790149][ T292] ? _raw_spin_lock+0xa4/0x1b0 [ 1138.795947][ T292] ? _raw_spin_unlock+0x4d/0x70 [ 1138.805710][ T292] ? list_lru_del+0x295/0x2d0 [ 1138.810489][ T292] evict_inodes+0x642/0x6d0 [ 1138.814913][ T292] ? clear_inode+0x150/0x150 [ 1138.819268][ T292] generic_shutdown_super+0x97/0x330 [ 1138.824511][ T292] kill_block_super+0x7e/0xe0 [ 1138.829189][ T292] kill_f2fs_super+0x2f9/0x3c0 [ 1138.833836][ T292] ? f2fs_mount+0x40/0x40 [ 1138.837952][ T292] ? unregister_shrinker+0x23c/0x2d0 [ 1138.843221][ T292] deactivate_locked_super+0xad/0x110 [ 1138.848437][ T292] deactivate_super+0xbe/0xf0 [ 1138.853018][ T292] cleanup_mnt+0x45c/0x510 [ 1138.857266][ T292] __cleanup_mnt+0x19/0x20 [ 1138.872152][ T292] task_work_run+0x129/0x190 [ 1138.876799][ T292] exit_to_user_mode_loop+0xc4/0xe0 [ 1138.882124][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 1138.887535][ T292] syscall_exit_to_user_mode+0x26/0x160 [ 1138.893060][ T292] do_syscall_64+0x47/0xb0 [ 1138.897366][ T292] ? clear_bhb_loop+0x35/0x90 [ 1138.902089][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1138.907913][ T292] RIP: 0033:0x7fd7ce6e5247 [ 1138.927869][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1138.950516][ T292] RSP: 002b:00007ffe7ef58548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1138.959856][ T292] RAX: 0000000000000000 RBX: 00007fd7ce757824 RCX: 00007fd7ce6e5247 [ 1138.968676][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ef58600 [ 1139.004572][ T292] RBP: 00007ffe7ef58600 R08: 0000000000000000 R09: 0000000000000000 [ 1139.044720][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7ef59680 [ 1139.069474][T12726] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1139.076994][ T292] R13: 00007fd7ce757824 R14: 000000000011523a R15: 00007ffe7ef596c0 [ 1139.084910][ T292] [ 1139.087697][ T292] ---[ end trace 2d217d3971cae9f0 ]--- [ 1139.130952][ T292] ================================================================== [ 1139.138854][ T292] BUG: KASAN: use-after-free in _raw_spin_lock+0x97/0x1b0 [ 1139.142344][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1139.145788][ T292] Write of size 4 at addr ffff8881295318c8 by task syz-executor/292 [ 1139.145809][ T292] [ 1139.164541][ T292] CPU: 1 PID: 292 Comm: syz-executor Tainted: G W 5.15.169-syzkaller-00123-g9efd694ed939 #0 [ 1139.175735][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1139.185628][ T292] Call Trace: [ 1139.188750][ T292] [ 1139.191530][ T292] dump_stack_lvl+0x151/0x1c0 [ 1139.196043][ T292] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1139.201509][ T292] ? __wake_up_klogd+0xd5/0x110 [ 1139.206195][ T292] ? panic+0x760/0x760 [ 1139.210103][ T292] ? preempt_schedule_irq+0xe7/0x140 [ 1139.215224][ T292] print_address_description+0x87/0x3b0 [ 1139.220606][ T292] kasan_report+0x179/0x1c0 [ 1139.224943][ T292] ? _raw_spin_lock+0x97/0x1b0 [ 1139.229545][ T292] ? _raw_spin_lock+0x97/0x1b0 [ 1139.234148][ T292] kasan_check_range+0x293/0x2a0 [ 1139.239265][ T292] __kasan_check_write+0x14/0x20 [ 1139.244043][ T292] _raw_spin_lock+0x97/0x1b0 [ 1139.248465][ T292] ? _raw_spin_trylock_bh+0x190/0x190 [ 1139.253672][ T292] ? _raw_spin_lock+0xa4/0x1b0 [ 1139.258274][ T292] ? _raw_spin_trylock_bh+0x190/0x190 [ 1139.263479][ T292] ? remove_wait_queue+0x140/0x140 [ 1139.268427][ T292] igrab+0x20/0xa0 [ 1139.271984][ T292] f2fs_sync_inode_meta+0x14d/0x2a0 [ 1139.277022][ T292] f2fs_write_checkpoint+0xab4/0x1fb0 [ 1139.282234][ T292] ? f2fs_get_sectors_written+0x500/0x500 [ 1139.287783][ T292] ? rwsem_write_trylock+0x153/0x340 [ 1139.292906][ T292] ? __kasan_check_write+0x14/0x20 [ 1139.297849][ T292] ? mutex_unlock+0xb2/0x260 [ 1139.302278][ T292] f2fs_issue_checkpoint+0x31b/0x4d0 [ 1139.307398][ T292] ? f2fs_destroy_checkpoint_caches+0x30/0x30 [ 1139.313299][ T292] ? sync_inodes_sb+0x7cd/0x8b0 [ 1139.317995][ T292] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 1139.323719][ T292] f2fs_sync_fs+0x186/0x2f0 [ 1139.328053][ T292] sync_filesystem+0x1cf/0x250 [ 1139.332657][ T292] f2fs_quota_off_umount+0x20e/0x220 [ 1139.337773][ T292] ? f2fs_drop_inode+0xa20/0xa20 [ 1139.342547][ T292] f2fs_put_super+0xb9/0xc10 [ 1139.346987][ T292] ? f2fs_drop_inode+0xa20/0xa20 [ 1139.351749][ T292] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 1139.357304][ T292] ? clear_inode+0x150/0x150 [ 1139.361730][ T292] ? fscrypt_destroy_keyring+0x287/0x2a0 [ 1139.367200][ T292] ? f2fs_drop_inode+0xa20/0xa20 [ 1139.371973][ T292] generic_shutdown_super+0x14f/0x330 [ 1139.377182][ T292] kill_block_super+0x7e/0xe0 [ 1139.381690][ T292] kill_f2fs_super+0x2f9/0x3c0 [ 1139.386295][ T292] ? f2fs_mount+0x40/0x40 [ 1139.390469][ T292] ? unregister_shrinker+0x23c/0x2d0 [ 1139.395594][ T292] deactivate_locked_super+0xad/0x110 [ 1139.400800][ T292] deactivate_super+0xbe/0xf0 [ 1139.405313][ T292] cleanup_mnt+0x45c/0x510 [ 1139.409559][ T292] __cleanup_mnt+0x19/0x20 [ 1139.413812][ T292] task_work_run+0x129/0x190 [ 1139.418241][ T292] exit_to_user_mode_loop+0xc4/0xe0 [ 1139.423270][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 1139.428559][ T292] syscall_exit_to_user_mode+0x26/0x160 [ 1139.433943][ T292] do_syscall_64+0x47/0xb0 [ 1139.438199][ T292] ? clear_bhb_loop+0x35/0x90 [ 1139.442709][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1139.448439][ T292] RIP: 0033:0x7fd7ce6e5247 [ 1139.452804][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1139.472238][ T292] RSP: 002b:00007ffe7ef58548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1139.480481][ T292] RAX: 0000000000000000 RBX: 00007fd7ce757824 RCX: 00007fd7ce6e5247 [ 1139.488292][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ef58600 [ 1139.496106][ T292] RBP: 00007ffe7ef58600 R08: 0000000000000000 R09: 0000000000000000 [ 1139.503915][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7ef59680 [ 1139.511725][ T292] R13: 00007fd7ce757824 R14: 000000000011523a R15: 00007ffe7ef596c0 [ 1139.519549][ T292] [ 1139.522404][ T292] [ 1139.524572][ T292] Allocated by task 15157: [ 1139.528826][ T292] __kasan_slab_alloc+0xb1/0xe0 [ 1139.533517][ T292] slab_post_alloc_hook+0x53/0x2c0 [ 1139.538459][ T292] kmem_cache_alloc+0xf5/0x200 [ 1139.543062][ T292] f2fs_alloc_inode+0x26/0x340 [ 1139.547662][ T292] new_inode_pseudo+0x64/0x220 [ 1139.552262][ T292] new_inode+0x28/0x1c0 [ 1139.556253][ T292] f2fs_new_inode+0x10e/0x1410 [ 1139.560853][ T292] f2fs_create+0x178/0x1510 [ 1139.565193][ T292] path_openat+0x13a8/0x2f40 [ 1139.569619][ T292] do_filp_open+0x21c/0x460 [ 1139.573959][ T292] do_sys_openat2+0x13f/0x820 [ 1139.578473][ T292] __x64_sys_openat+0x243/0x290 [ 1139.583162][ T292] x64_sys_call+0x6bf/0x9a0 [ 1139.587500][ T292] do_syscall_64+0x3b/0xb0 [ 1139.591751][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1139.597482][ T292] [ 1139.599652][ T292] Freed by task 15276: [ 1139.603554][ T292] kasan_set_track+0x4b/0x70 [ 1139.607982][ T292] kasan_set_free_info+0x23/0x40 [ 1139.612755][ T292] ____kasan_slab_free+0x126/0x160 [ 1139.617700][ T292] __kasan_slab_free+0x11/0x20 [ 1139.622304][ T292] slab_free_freelist_hook+0xbd/0x190 [ 1139.627509][ T292] kmem_cache_free+0x116/0x2e0 [ 1139.632109][ T292] f2fs_free_inode+0x24/0x30 [ 1139.636537][ T292] i_callback+0x4b/0x70 [ 1139.640528][ T292] rcu_do_batch+0x57a/0xc10 [ 1139.644957][ T292] rcu_core+0x517/0x1020 [ 1139.649133][ T292] rcu_core_si+0x9/0x10 [ 1139.653115][ T292] handle_softirqs+0x25e/0x5c0 [ 1139.657713][ T292] __irq_exit_rcu+0x52/0xf0 [ 1139.662058][ T292] irq_exit_rcu+0x9/0x10 [ 1139.666133][ T292] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1139.671601][ T292] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1139.677437][ T292] [ 1139.679594][ T292] Last potentially related work creation: [ 1139.685148][ T292] kasan_save_stack+0x3b/0x60 [ 1139.689657][ T292] __kasan_record_aux_stack+0xd3/0xf0 [ 1139.694861][ T292] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1139.700517][ T292] call_rcu+0x123/0x10b0 [ 1139.704580][ T292] evict+0x87d/0x930 [ 1139.708313][ T292] evict_inodes+0x642/0x6d0 [ 1139.712665][ T292] generic_shutdown_super+0x97/0x330 [ 1139.717773][ T292] kill_block_super+0x7e/0xe0 [ 1139.722285][ T292] kill_f2fs_super+0x2f9/0x3c0 [ 1139.726974][ T292] deactivate_locked_super+0xad/0x110 [ 1139.732181][ T292] deactivate_super+0xbe/0xf0 [ 1139.736694][ T292] cleanup_mnt+0x45c/0x510 [ 1139.740956][ T292] __cleanup_mnt+0x19/0x20 [ 1139.745210][ T292] task_work_run+0x129/0x190 [ 1139.749629][ T292] exit_to_user_mode_loop+0xc4/0xe0 [ 1139.754661][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 1139.760040][ T292] syscall_exit_to_user_mode+0x26/0x160 [ 1139.765422][ T292] do_syscall_64+0x47/0xb0 [ 1139.769677][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1139.775406][ T292] [ 1139.777572][ T292] Second to last potentially related work creation: [ 1139.783997][ T292] kasan_save_stack+0x3b/0x60 [ 1139.788508][ T292] __kasan_record_aux_stack+0xd3/0xf0 [ 1139.793719][ T292] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1139.799446][ T292] call_rcu+0x123/0x10b0 [ 1139.803537][ T292] evict+0x87d/0x930 [ 1139.807267][ T292] evict_inodes+0x642/0x6d0 [ 1139.811599][ T292] generic_shutdown_super+0x97/0x330 [ 1139.816731][ T292] kill_block_super+0x7e/0xe0 [ 1139.821231][ T292] kill_f2fs_super+0x2f9/0x3c0 [ 1139.825833][ T292] deactivate_locked_super+0xad/0x110 [ 1139.831040][ T292] deactivate_super+0xbe/0xf0 [ 1139.835552][ T292] cleanup_mnt+0x45c/0x510 [ 1139.839805][ T292] __cleanup_mnt+0x19/0x20 [ 1139.844060][ T292] task_work_run+0x129/0x190 [ 1139.848483][ T292] exit_to_user_mode_loop+0xc4/0xe0 [ 1139.853518][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 1139.858811][ T292] syscall_exit_to_user_mode+0x26/0x160 [ 1139.864192][ T292] do_syscall_64+0x47/0xb0 [ 1139.868444][ T292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1139.874174][ T292] [ 1139.876347][ T292] The buggy address belongs to the object at ffff888129531840 [ 1139.876347][ T292] which belongs to the cache f2fs_inode_cache of size 1424 [ 1139.891100][ T292] The buggy address is located 136 bytes inside of [ 1139.891100][ T292] 1424-byte region [ffff888129531840, ffff888129531dd0) [ 1139.904320][ T292] The buggy address belongs to the page: [ 1139.909771][ T292] page:ffffea0004a54c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888129535af0 pfn:0x129530 [ 1139.921134][ T292] head:ffffea0004a54c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1139.929288][ T292] flags: 0x4000000000010200(slab|head|zone=1) [ 1139.935199][ T292] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888107fb9800 [ 1139.943613][ T292] raw: ffff888129535af0 000000008015000e 00000001ffffffff 0000000000000000 [ 1139.952030][ T292] page dumped because: kasan: bad access detected [ 1139.958285][ T292] page_owner tracks the page as allocated [ 1139.963830][ T292] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 384, ts 30264557307, free_ts 0 [ 1139.984152][ T292] post_alloc_hook+0x1a3/0x1b0 [ 1139.988739][ T292] prep_new_page+0x1b/0x110 [ 1139.993094][ T292] get_page_from_freelist+0x3550/0x35d0 [ 1139.998461][ T292] __alloc_pages+0x27e/0x8f0 [ 1140.002889][ T292] new_slab+0x9a/0x4e0 [ 1140.006790][ T292] ___slab_alloc+0x39e/0x830 [ 1140.011218][ T292] __slab_alloc+0x4a/0x90 [ 1140.015384][ T292] kmem_cache_alloc+0x134/0x200 [ 1140.020075][ T292] f2fs_alloc_inode+0x26/0x340 [ 1140.024671][ T292] iget_locked+0x174/0x860 [ 1140.028925][ T292] f2fs_iget+0x55/0x4fe0 [ 1140.033005][ T292] f2fs_fill_super+0x66aa/0x8190 [ 1140.037779][ T292] mount_bdev+0x282/0x3b0 [ 1140.041946][ T292] f2fs_mount+0x34/0x40 [ 1140.045938][ T292] legacy_get_tree+0xf1/0x190 [ 1140.050449][ T292] vfs_get_tree+0x88/0x290 [ 1140.054704][ T292] page_owner free stack trace missing [ 1140.059912][ T292] [ 1140.062082][ T292] Memory state around the buggy address: [ 1140.067553][ T292] ffff888129531780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1140.075452][ T292] ffff888129531800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1140.083347][ T292] >ffff888129531880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1140.091243][ T292] ^ [ 1140.097581][ T292] ffff888129531900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1140.105483][ T292] ffff888129531980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1140.113375][ T292] ================================================================== [ 1140.121275][ T292] Disabling lock debugging due to kernel taint [ 1140.361034][T12726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.371852][T12726] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1140.380728][T12726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.390040][T12726] usb 2-1: config 0 descriptor?? [ 1140.884886][T12726] magicmouse 0003:05AC:0265.001B: unknown main item tag 0x5 [ 1140.895837][T12726] magicmouse 0003:05AC:0265.001B: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 1141.083193][ T3492] usb 2-1: USB disconnect, device number 21